Skip to content

chore(deps): bump tar and semantic-release in /plugins/bynder-example#4328

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/plugins/bynder-example/multi-88806cd40b
Open

chore(deps): bump tar and semantic-release in /plugins/bynder-example#4328
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/plugins/bynder-example/multi-88806cd40b

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 28, 2026

Removes tar. It's no longer used after updating ancestor dependency semantic-release. These dependencies need to be updated together.

Removes tar

Updates semantic-release from 24.0.0 to 25.0.3

Release notes

Sourced from semantic-release's releases.

v25.0.3

25.0.3 (2026-01-30)

Bug Fixes

v25.0.2

25.0.2 (2025-11-07)

Bug Fixes

  • deps: update dependency read-package-up to v12 (#3935) (1494cb9)

v25.0.1

25.0.1 (2025-10-19)

Bug Fixes

v25.0.1-beta.3

25.0.1-beta.3 (2025-10-19)

Bug Fixes

  • deps: update to latest npm plugin (a96aced)

v25.0.1-beta.2

25.0.1-beta.2 (2025-10-19)

Bug Fixes

v25.0.1-beta.1

25.0.1-beta.1 (2025-10-16)

Bug Fixes

... (truncated)

Commits
  • f404124 fix(deps): remove deprecated semver-diff (#3980)
  • fef7e34 docs: warn against using registry-url in setup-node (#4024)
  • 699d470 chore(deps): update dependency lockfile-lint to v5 (#4022)
  • c7c6f7a chore(deps): update dependency tempy to v3.1.2 (#4021)
  • 1ce5088 ci(action): update github/codeql-action action to v4.32.0 (#4019)
  • 9bb0d87 chore(deps): lock file maintenance (#4016)
  • 490171c chore(deps): update npm to v11.8.0 (#4015)
  • f6411e9 chore(deps): update dependency prettier to v3.8.1 (#4014)
  • c71c576 chore(deps): update dependency publint to v0.3.17 (#4013)
  • 989e18c chore(deps): update dependency tempy to v3.1.1 (#4012)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for semantic-release since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Medium Risk
Updates a major version of semantic-release, which can affect publishing/release behavior and Node engine requirements for the plugin’s release pipeline. Code/runtime behavior of the plugin itself is unchanged, but CI/release jobs may break if they rely on older tooling.

Overview
Updates the plugins/bynder-example release toolchain. semantic-release is bumped from 24.x to 25.0.3 and the unused tar dependency is removed.

The package-lock.json is regenerated to reflect the new semantic-release dependency tree (including updated transitive packages/engine constraints).

Written by Cursor Bugbot for commit 86a2eb7. This will update automatically on new commits. Configure here.

Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [semantic-release](https://github.com/semantic-release/semantic-release). These dependencies need to be updated together.


Removes `tar`

Updates `semantic-release` from 24.0.0 to 25.0.3
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v24.0.0...v25.0.3)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 
  dependency-type: indirect
- dependency-name: semantic-release
  dependency-version: 25.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 28, 2026
@changeset-bot
Copy link

changeset-bot bot commented Feb 28, 2026

⚠️ No Changeset found

Latest commit: 86a2eb7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@nx-cloud
Copy link

nx-cloud bot commented Feb 28, 2026

🤖 Nx Cloud AI Fix Eligible

An automatically generated fix could have helped fix failing tasks for this run, but Self-healing CI is disabled for this workspace. Visit workspace settings to enable it and get automatic fixes in future runs.

To disable these notifications, a workspace admin can disable them in workspace settings.


View your CI Pipeline Execution ↗ for commit 86a2eb7

Command Status Duration Result
nx test @snippet/react ❌ Failed 3m 42s View ↗
nx test @e2e/qwik-city ✅ Succeeded 7m 25s View ↗
nx test @e2e/nextjs-sdk-next-app ✅ Succeeded 7m 1s View ↗
nx test @e2e/angular-17 ✅ Succeeded 6m 30s View ↗
nx test @e2e/nuxt ✅ Succeeded 5m 39s View ↗
nx test @e2e/angular-19-ssr ✅ Succeeded 5m 9s View ↗
nx test @e2e/react-sdk-next-14-app ✅ Succeeded 4m 59s View ↗
nx test @e2e/react-sdk-next-15-app ✅ Succeeded 5m 6s View ↗
Additional runs (37) ✅ Succeeded ... View ↗

☁️ Nx Cloud last updated this comment at 2026-02-28 21:54:54 UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants